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Abstract 


Command  and  Control  (C2)  is  one  of  the  most,  if  not  the  most,  important  Operational 
Function  for  a  Joint  Force  Commander  (JFC).  History  is  replete  with  examples  where 
inadequate  or  overly  complicated  C2  has  adversely  impacted  a  military’s  ability  to  attain 
their  operational  objectives.  According  to  Dr.  Milan  Vego,  to  successfully  attain  their 
objectives,  JFCs  are  best  served  by  adhering  to  the  time  tested  tenets  of  Operational  C2. 
Throughout  history,  advances  in  technology  and  the  military’s  incorporation  of  them  have 
drastically  altered  the  face  of  war  (e.g.  airplane  in  WWII).  Today,  the  military  is  in  the  midst 
of  a  technological  revolution  due  to  the  proliferation  of  the  internet  and  other  network-based 
communications  -  often  referred  to  as  cyberspace  -  and  its  inclusion  into  nearly  every  aspect 
of  operations.  Cyberspace  provides  the  military  an  additional  and  unique  method  to 
operationally  survey,  recon,  and  strike  enemy  forces,  while  providing  a  means  to 
operationally  sustain  and  protect  its  own  forces.  The  Joint  community  has  not  yet  developed 
doctrine  on  how  to  operationally  C2  cyberspace  operations.  Current  dialogue  and  initiatives 
regarding  C2  of  cyberspace  operations  are  embedded  in  the  larger  discussion  concerning  the 
C2  of  Information  Operations  (10).  Many  of  these  previous  efforts  have  analyzed  10  as  a 
collective  whole  rather  than  analyzing  each  core  capability,  or  viewed  cyberspace  solely  as  a 
sub-element  of  the  information  environment  rather  than  viewing  it  as  a  unique  domain.  This 
paper  focuses  solely  on  analyzing  and  detennining  the  optimal  method  in  which  to 
operationally  C2  cyberspace  operations  in  a  Joint  Task  Force  (JTF).  Finally,  this  paper 
recommends  that  a  Joint  Functional  Cyberspace  Component  Commander  (JFCCC)  be 
formerly  incorporated  into  Joint  Doctrine  for  the  purposes  of  operationally  commanding  and 
controlling  cyberspace  operations  in  current  and  future  campaigns  and  operations. 
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INTRODUCTION 


The  Operational  Function  of  Command  and  Control  (C2)  is  one  of  the  most,  if  not  the 
most,  important  Operational  Function  for  a  Joint  Force  Commander  (JFC)  because  “it  is  the 
principal  means  by  which  the  [Joint  Force]  commander  sequences  and  synchronizes  the 
actions  and  activities  of  both  military  and  nonmilitary  sources  of  national  power  in  a  given 
theater.”1  History  is  replete  with  examples  where  non-existent,  inadequate,  excessive  or 
overly  complicated  Operational  C2  has  adversely  impacted  a  military’s  ability  to  attain  their 
operational  objectives  or  unduly  increased  risk  to  the  force  and/or  the  mission.  In  order  to 
successfully  attain  their  objectives,  JFCs  are  best  served  by  adhering  to  the  time  tested  tenets 
of  Operational  C2  -  simplicity,  flexibility,  unity  of  effort  (UoE),  integration,  continuity, 
homogeneity,  balance,  and  stability  -  when  designing  their  Joint  Force  C2  structure." 

Advances  in  technology  and  the  U.S.  military’s  incorporation  of  these  new 
technologies  into  its  capability  sets  has  drastically  altered  the  manner  in  which  future  wars 
would  be  conducted.  One  of  the  most  significant  technological  advances  was  the  invention 
of  the  airplane.  The  integration  of  the  airplane  into  the  military  completely  changed  the  face 
of  war  by  providing  another  manner  in  which  to  operationally  move,  maneuver,  and  sustain 
forces.  Furthermore,  it  offered  an  additional  method  in  which  to  operationally  survey,  recon, 
and  strike  enemy  forces,  while  providing  another  means  to  operationally  protect  its  own 
forces.  Although  the  addition  of  the  aircraft,  and  air  forces,  to  the  military  was  welcomed, 
the  manner  in  which  they  were  to  be  operationally  commanded  and  controlled  was  a  highly 
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contentious  issue,  which  was  eventually  resolved  through  the  development  of  Joint  Doctrine 
for  the  C2  of  Air  Operations.3 

Today,  the  military  is  in  the  midst  of  a  similar  situation  as  a  result  of  the  advent  and 
proliferation  of  the  internet  and  other  network-based  communications  -  often  referred  to  as 
cyberspace  -  and  its  inclusion  into  nearly  every  aspect  of  operations.  Analogous  to  the 
airplane,  the  incorporation  of  cyberspace  into  the  military  has  completely  changed  the  face  of 
war.  Military  forces  cannot  operationally  move  and  maneuver  in  cyberspace  in  a  physical 
manner;  however,  cyberspace  provides  the  military  an  additional  and  unique  method  to 
operationally  survey,  recon,  and  strike  enemy  forces,  while  providing  a  means  to 
operationally  sustain  and  protect  its  own  forces.  Similar  to  the  airplane,  the  military  services 
have  harnessed  the  advantages  of  cyberspace  by  integrating  its  capabilities  into  in  all  facets 
of  operations.  However,  unlike  Air  Operations,  the  Joint  community  has  not  yet  developed, 
nor  is  it  currently  developing,  Joint  Doctrine  for  the  purpose  of  advising  current  and  future 
JFCs  how  to  best  Operationally  C2  cyberspace  operations.4 

Current  dialogue  and  initiatives  regarding  C2  of  cyberspace  operations  are  embedded 
in  the  larger  discussion  concerning  the  Operational  C2  of  Information  Operations  (10), 
mainly  because  Computer  Network  Operations  (CNO)  and  Electronic  Warfare  (EW)  are 
doctrinally  two  of  the  five  core  capabilities  of  10. 3  In  recent  years,  military  professionals 
have  written  extensively  on  the  issue  of  Operational  C2  of  10,  including  several  who  have 
recommended  that  Joint  Doctrine  provide  provisions  for  the  establishment  of  a  Functional 
Component  Commander  (FCC)  who  would  be  responsible  for  the  Operational  C2  of  10. 6 
Additionally,  several  of  today’s  standing  Joint  Task  Forces  (JTFs)  have  had  similar 
discussions,  and  even  conducted  Command  Post  and  Field  Training  Exercises  with  a  variety 
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of  constructs  for  the  Operational  C2  of  10,  to  include  the  Joint  Force  Infonnation  Operation 
Component  Commander  (JFIOCC)  and/or  the  JTF  Commander  (CJTF)  retaining  C2  of  10. 7 
Although  these  are  valid  and  important  discussions,  the  critical  flaw  has  been  two-fold,  first, 
many  of  these  studies  analyzed  10  as  a  collective  whole,  rather  than  individually  analyzing 
each  core  capability,  second,  they  viewed  cyberspace  solely  as  a  sub-element  of  the 
information  environment,  rather  than  viewing  it  as  a  unique  domain. 

Unlike  these  previous  efforts,  this  paper  focuses  solely  on  analyzing  and  detennining 
the  optimal  method  in  which  to  C2  cyberspace  operations  in  a  JTF  construct,  not  the  entire 
spectrum  of  10.  In  order  to  detennine  the  optimal  operational  level  C2  construct,  this  paper 
will  first  define  what  constitutes  cyberspace  and  explain  how  its  attributes  cause  difficulties 

o 

with  the  traditional  “Theater  Structure  and  Levels  of  War”  construct.  Second,  it  will  explain 
what  cyberspace  does  for  the  JTF  and  discuss  the  adverse  impact  to  the  achievement  of 
operational  objectives  that  can  occur  if  the  requisite  focus  of  effort  is  not  applied  to 
cyberspace  operations.  Third,  the  paper  will  explain  what  cyberspace  forces  are,  where  they 
are  located  in  a  JTF,  how  they  are  traditionally  task-organized,  and  it  will  address  the 
significant  problems  this  task-organization  construct  causes  for  cyberspace  operations. 
Fourth,  the  paper  will  present  three  possible  constructs  for  the  Operational  C2  of  cyberspace 
operations:  U.S.  Strategic  Command  (USSTRATCOM),  JTF,  and  FCC,  and  analyze  these 
constructs  against  three  of  noted  operational  art  theorist  Dr.  Milan  Vego’s  tenets  of 
Operational  C2  -  simplicity,  UoE,  and  homogeneity.  Finally,  based  on  the  results  of  this 
analysis,  this  paper  will  recommend  that  a  Joint  Functional  Cyberspace  Component 
Commander  (JFCCC)  be  formerly  incorporated  into  Joint  Doctrine  for  the  purposes  of 
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operationally  command  and  controlling  cyberspace  operations  in  current  and  future 
campaigns  and  operations. 


MEDIUM  -  ENVIRONMENT  -  DOMAIN  -  DIMENSION  (MEDD) 


Current  Joint  Doctrine  does  not  define  the  terms  medium,  environment,  domain  or 
dimension  (heretofore  referred  to  as  “MEDD”),  yet,  nearly  all  military  professionals  are 
familiar  with  and  readily  use  these  terms.9  This  is  not  merely  an  issue  of  semantics,  but  a 
significant  distinction  because  the  military  customarily  task-organizes  its  services  and  joint 
forces  along  MEDDs.  The  Departments  of  the  Navy,  Army  and  Air  Force  are  primarily 
responsible  for  organizing,  manning,  training,  and  equipping  of  forces  to  operate  in  the 
maritime,  land  and  air  MEDDs  respectively.10  Additionally,  during  joint  campaigns  and 
operations,  our  military  forces  are  similarly  task-organized  to  operate  in  the  maritime,  land, 
and  air  MEDDs  through  the  establishment  of  service  or  joint  FCCs.1 1 

HOW  ARE  MEDDS  CHARACTERIZED? 

To  answer  this  question,  we  look  at  current  Joint  Doctrine,  which  characterizes 
MEDDs  through  the  concept  of  the  Operational  Environment,  “the  composite  of  the 
conditions,  circumstances,  and  influences  that  affect  the  employment  of  capabilities  and  bear 
on  the  decisions  of  the  commander.  It  encompasses  physical  areas  and  factors  (of  the  air, 
land,  maritime,  and  space  domains)  and  the  information  environment.”  Furthermore,  Joint 
Doctrine  defines  the  information  environment  as  “the  aggregate  of  individuals,  organizations, 

•  IT 

and  systems  that  collect,  process,  disseminate,  or  act  on  information.”  ~  The  information 
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environment  is  sub-divided  into  three  dimensions  -  physical,  informational,  and  cognitive.14 
Quite  strikingly,  cyberspace  is  not  included  in  the  concept  of  the  Operating  Environment  nor 
specifically  included  in  any  of  the  three  sub-component  definitions  of  the  information 
environment.  Additionally,  cyberspace  is  neither  addressed  nor  discussed  in  JP  3-0,  Joint 
Operations,  or  JP  3-13,  Joint  Doctrine  for  10,  but  only  defined  in  JP  3-13  as  “the  notional 
environment  in  which  digitized  information  is  communicated  over  computer  networks.”15 
Furthermore,  the  current  Quadrennial  Defense  Review  and  National  Military  Strategy  (NMS), 
although  neither  specifically  define  cyberspace,  both  refer  to  it  as  a  domain,  and  the  NMS 
further  characterizes  cyberspace  as  one  of  the  four  global  commons,  on  par  with  international 
airspace,  waters,  and  space.16 

WHAT  IS  CYBERSPACE? 

Clearly  understanding  what  cyberspace  is  and  is  not,  is  essential  to  determining  the 
optimal  method  of  commanding  and  controlling  cyberspace  operations.  Although  JP  3-0,  JP 
3-13,  and  the  current  QDR  and  NMS  classify  cyberspace  as  an  environment  or  domain,  none 
of  these  documents  define  its  attributes  or  characteristics  with  any  fidelity.  One  Joint 
Publication,  JP  2-01.3 ,  Joint  Tactics,  Techniques,  and  Procedures  for  Joint  Intelligence 
Preparation  of  the  Battlespace,  indentifies  the  attributes  and  characteristics  of  cyberspace  as 
“composed  of  computer  hardware,  networks,  software,  data,  procedures,  and  human 
operators.”17  Moreover,  the  Air  Force  recently  characterized  cyberspace  as  “the  use  of 
electronics  and  the  electromagnetic  spectrum  to  store,  modify  and  exchange  data  via 

1  o 

networked  information  systems  and  associated  physical  infrastructures.”  Both  definitions 
provide  some  fidelity  to  cyberspace,  but  leave  much  to  be  desired,  especially  in  regard  to 
cyberspace’s  relationship  with  the  other  domains  and  the  information  environment. 
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For  the  purposes  of  this  paper,  cyberspace  is  considered  a  homogeneous,  physical 
domain  which  resides  inside  the  collective  boundaries  of  the  traditional  physical  domains  - 
air,  land,  maritime  and  space,  and  co-exists  in  some  regions  with  these  other  traditional 
physical  domains  much  like  the  co-existence  of  the  air,  land,  and  maritime  domains  in  the 
littoral  region,  see  Figures  (1)  and  (2). 19  Furthermore,  cyberspace  is  defined  as  the 
aggregation  of  all  Electro-Magnetic  (EM)  equipment  located  in  the  physical  domains  that  is 
networked  together  by  hard-line  (fiber-optics,  wire,  etc.)  and  air-gap  (via  the  EM  spectrum) 
connections  for  the  purposes  of  storing,  modifying,  and  exchanging  information  in  the  form 
of  data  through  interaction  with  both  animate  and  inanimate  entities  in  the  physical  domains 
to  support  the  human  cognitive  dimension  and  influence  electro-mechanical  objects  in  all  of 
the  physical  domains.  It  is  critical  to  highlight  that  in  this  definition,  cyberspace  relies  not 
only  on  hard-line  connections  facilitated  by  the  EM  spectrum  (electrical  impulses  and  optics) 
to  exchange  data  (the  realm  of  CNO),  but  is  also  dependent  on  air-gap  connections  facilitated 
by  the  EM  spectrum  (infrared  and  radio  waves)  to  exchange  data  (the  realm  of  EW). 
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Figure  2:  Physical  Environment  (to  include  Cyberspace) 
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THEATER  STRUCTURE  AND  LEVELS  OF  WAR 


Per  Dr.  Vego’s  “Theater  Structure  and  Levels  of  War”  concept,  a  “theater  should  be 
militarily  organized  to  ensure  the  most  favorable  conditions  for  the  employment  of  one’s 
forces  across  the  entire  spectrum  of  conflict.”  Furthermore,  he  states  that  “the  theater  has 
to  be  divided  into  a  number  of  geographically  based  areas  to  ensure  the  most  effective 
employment  of  one’s  military  and  non-military  sources  of  power”  and  that  “the  theater  and 
its  subdivisions  are  the  very  basis  for  establishing  and  maintaining  tactical,  operational,  and 

9 1 

strategic  levels  of  command  or  command  echelons.” 

These  concepts  apply  easily  to  the  land  and  maritime  domains  for  two  reasons,  first, 
boundaries  can  be  established  to  differentiate  between  physical  regions  in  these  domains, 
second,  the  speed  of  friendly  and  enemy  forces  operating  in  these  domains  is  relatively  slow, 
which  pennits  moderately  easy  transfer  of  friendly  forces  between  and  among  the  three 
levels  of  command,  and  the  tracking  of  enemy  forces.  Although  enemy  and  friendly  forces 
operating  in  the  air  and  space  domains  travel  at  speeds  that  are  orders  of  magnitude  higher 
than  forces  operating  in  the  land  and  maritime  domains,  Dr.  Vego’s  concept  still  applies  to 
the  air  and  space  domains  because  the  movement  of  enemy  or  friendly  forces  in  the  space 
domain  is  known  in  advance  due  to  orbital  physics.  That  is,  objects  operating  in  space 
(satellites  and  spacecraft)  rely  on  the  earth’s  gravitational  pull  to  propel  them  thru  space. 
Moreover,  technology,  to  include  RADAR,  imagery,  and  signals  intelligence,  enables  the 
tracking  of  both  friendly  and  enemy  forces  operating  in  the  air  and  space  domains.  For  these 
reasons,  designating  tactical,  operational,  and  strategic  levels  of  command  in  these  domains 
is  possible  and  transferring  forces  between  and  among  these  levels  is  relatively  simple. 
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However,  Dr.  Vego’s  concept  does  not  easily  apply  to  cyberspace  because  the  speed 
of  both  friendly  and  enemy  forces,  ranging  from  the  speed  of  sound  to  the  speed  of  light, 
makes  tracking  them  difficult  to  nearly  impossible.  A  cyberspace  force  can  move  from  one 
side  of  the  globe  to  the  other  in  milliseconds,  thus  theoretically  moving  from  a  tactical  to 
strategic  level  of  command.  Although  geographical  regions  could  nominally  be  established 
for  cyberspace,  whether  equating  to  the  boundaries  established  for  the  land,  air,  or  maritime 
domains,  or  to  boundaries  established  by  linking  communication  nodes,  for  the  above  reasons 


the  nature  of  cyberspace  presents  difficulties  in  designating  levels  of  command. 


WHAT  DOES  CYBERSPACE  DO  FOR  THE  JTF? 


We’ve  established  what  cyberspace  is,  but  what  does  it  actually  do  for  the  JTF  at  the 
operational  level  of  war?  First,  recall  that  Operational  C2  is  recognized  as  “the  principal 
means  by  which  an  operational  commander  sequences  and  synchronizes  joint  force  activities 
in  peacetime  and  orchestrates  use  of  military  and  nonmilitary  sources  of  power  to  accomplish 
assigned  strategic  objectives  in  war.”  Then,  consider  that  “C2  cannot  be  successful  without 
a  well-developed,  highly  efficient,  and  survivable  theater-wide  [and  area  of  operations-wide] 
command,  control,  communications,  and  computer  (C4)  system.”24 

The  C4  system  is  composed  of  three  principal  components  -  command,  control,  and 
the  C2  system.  Command  is  “the  authority  and  responsibility  for  effectively  using  available 
resources  for  planning  the  employment  of,  organizing,  directing,  and  coordinating  military 
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forces  for  the  accomplishment  of  assigned  [operational]  missions.”25  Control  is  “inherent  in 
command,  and  is  used  to  regulate  forces  and  [Operational]  functions  to  execute  the 
commander’s  intent.”26  Finally,  the  C2  system  comprises  the  “facilities,  equipment, 
communications,  procedures,  and  personnel  essential  to  a  [Joint  Force]  commander  for 
planning,  directing,  and  controlling  operations  of  assigned  and  attached  forces  pursuant  to  the 
[operational]  mission  [and  objectives]  assigned.”  Thus,  the  C2  system  is  the  mechanism 
which  enables  the  CJTF  to  operationally  command  and  control  his  forces,  without  this 
system  modern  day  campaigns  and  operations  would  not  be  possible. 

Furthermore,  the  foundation  for  today’s  C2  system  is  the  Global  Information  Grid 
(GIG),  “the  DOD’s  globally  interconnected,  end-to-end  set  of  information  capabilities, 
associated  processes,  and  personnel  for  collecting,  processing,  storing,  disseminating,  and 
managing  information  on  demand  to  joint  forces.”  The  GIG  “includes  all  [military]  owned 
and  [commercially]  leased  communications  and  computing  systems  and  services,  software, 
data,  security  services,  and  other  associated  services  necessary  to  achieve  information 
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security”  and  “provides  interfaces  to  multination  and  non-DOD  users  and  systems.” 

Similar  to  cyberspace,  it  is  critical  to  understand  that  the  GIG  relies  not  only  on  hard-line 
connections  facilitated  by  the  EM  spectrum  to  exchange  data  (the  realm  of  CNO),  but  is  also 
dependent  on  air-gap  connections  facilitated  by  the  EM  spectrum  to  exchange  data  (the  realm 
of  EW),  see  Figure  (3).  Since  the  GIG  is  connected  to  other  global  and  globally  connected 
information  systems,  it  is  part  of  the  overall  cyberspace  domain.  Therefore,  events  that  occur 
in  cyberspace  can  impact,  positively  or  negatively,  the  JTF’s  C2  system,  which  would  in  turn 
directly  impact  the  JTF’s  ability  to  C2  its  subordinate  forces. 
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Figure  3:  Global  Information  Grid  (GIG):  Red  Circles  and  Lines  represent  the  Military  portion  of 

cyberspace  (GIG). 


In  addition  to  enabling  Operational  C2,  the  Operational  Functions  of  “intelligence, 
fires,  logistics,  and  protection  all  depend  on  responsive  C4”  and,  thus  the  C2  system/  JP  2- 
0,  Joint  Intelligence,  explains  that  “an  intelligence  sharing  architecture  is  integral  to  all 
[operational  level]  intelligence  operations  and  that  this  architecture  functions  over  the  GIG”; 

'X') 

therefore,  actions  that  occur  in  cyberspace  can  directly  impact  Operational  Intelligence.  Per 
JP  3-9,  Joint  Fires,  [Operational]  fires  require  “the  coordinated  interaction  of  all  elements  of 
the  fire  support  system,”  which  includes  the  “target  acquisition,  C2,  and  attack/delivery 
systems.”33  Similar  to  the  intelligence  sharing  architecture,  since  the  fire  support  systems  are 
part  of  the  GIG,  actions  in  cyberspace  can  directly  impact  Operational  Fires. 

Operational  Protection  involves  the  integration  of  multiple  components  to  preserve 
“the  effectiveness  and  survivability  of  military  and  non-military  sources  of  power.”34  These 
components  include  collecting  intelligence  for  indications  and  warning,  protection  of 
information  systems,  ballistic  missile  defense,  and  several  others,  all  of  which  are  dependent 


15 


on  the  C2  system,  and  thus  the  GIG,  to  function  individually  and  collectively.35  Finally,  the 
critical  enabler  for  Operational  Logistics  is  the  “implementation  of  [an]  end-to-end  support 
capability  by  integrating  existing  information  technologies  and  logistic  automated 
information  systems,”  which  ensures  that  a  campaign  or  operation  can  be  adequately 
supported  and  logistically  sustained/6  Therefore,  Operational  Protection  and  Logistics  may 
also  be  adversely  impacted  by  actions  in  cyberspace  because  of  their  reliance  on  the  GIG. 

The  above  discussion  clearly  demonstrates  that  five  of  the  six  Operational  Functions 
of  war  -  C2,  intelligence,  fires,  logistics,  and  protection  -  are  highly  dependent  on  the  access 
to  and  actions  that  occur  in  the  cyberspace  domain  because  the  GIG  is  connected  to 
cyberspace.  If  the  CJTF  does  not  place  the  requisite  emphasis  on  the  maintenance,  operation, 
and  defense  of  his  “portion”  of  the  GIG  and  its  interaction  with  cyberspace,  he  places  at  risk 
his  ability  to  conduct  one  or  all  of  these  Operational  Functions;  and  ultimately  jeopardizes 
the  likelihood  of  achieving  his  assigned  strategic  and  operational  objectives. 

Besides  enabling  the  JTF’s  Operational  Functions,  cyberspace  also  enables  the 
Operational  Functions  of  other  nation-state  militaries  and  non-state  actors,  some  of  whom  are 
currently  or  may  become  our  adversaries.  Therefore,  cyberspace  provides  a  mechanism  in 
which  to  attack  one  or  more  of  an  adversary’s  Operational  Functions,  and  possibly  directly  or 
indirectly  attack  the  adversary’s  Center  of  Gravity  (CoG).  If  the  CJTF  does  not  place  the 
requisite  emphasis  on  understanding  the  adversary’s  use  of  and  reliance  on  cyberspace,  and 
does  not  leverage  his  capabilities  that  can  strike  an  enemy  in  the  cyberspace  domain,  he  may 
miss  or  severely  limit  the  opportunity  to  achieve  his  strategic  and  operational  objectives. 
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WHAT  ARE  CYBERSPACE  FORCES? 


Clearly  understanding  what  constitutes  cyberspace  forces  is  critical  to  determining  the 
appropriate  manner  in  which  joint  force  cyberspace  operations  should  be  commanded  and 
controlled  because  “C2  encompasses  the  exercise  of  authority  and  direction  by  a  commander 
over  assigned  and  attached  forces  in  the  accomplishment  of  the  mission  [objectives].” 
Although  cyberspace  has  only  recently  been  formally  recognized  as  a  domain,  both  the  joint 
community  and  services  have  maintained  cyberspace  forces  for  quite  some  time,  and  have 
recently  focused  efforts  on  increasing  the  size  and  quality  of  some  of  these  forces.  So,  what 
is  a  cyberspace  force?  Once  again,  none  of  the  Joint  or  Service  Publications  provide  a  formal 
definition,  although  Air  Force  Doctrine  Document  2-8,  Command  and  Control,  cites  the  tenn 
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“cyberspace  forces”  in  several  instances,  though  without  providing  a  formal  definition. 

Before  defining  what  constitutes  a  cyberspace  force,  it  is  essential  to  understand  what 
constitutes  a  military  force.  Per  JP  1-02,  a  military  force  is  “an  aggregation  of  military 
personnel,  weapon  systems,  equipment,  and  necessary  support,  or  combination  thereof.”40 
Considering  this  definition,  this  paper’s  definition  of  cyberspace,  and  the  concept  of  the  GIG, 
a  cyberspace  force  is  defined  as  -  the  aggregation  of  military  personnel,  hardware,  software, 
and  necessary  support  that  manage,  maintain,  operate,  and  defend  the  GIG  and  exploit  and 
attack  targets  in  cyberspace,  to  include  adversary  GIG-equivalent  systems.  This  definition 
clearly  delineates  between  those  forces  (land,  maritime,  air,  and  space),  who  use  the 
GIG/cyberspace  as  a  mechanism  to  support  the  performance  their  primary  mission  - 
operations  in  the  land,  maritime,  air,  and  space  domains,  and  those  forces  (cyberspace  forces), 
who  operate  inside  the  GIG/cyberspace  to  exploit  and  attack  adversaries. 
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Cyberspace  forces  can  be  separated  into  three  groups  -  Communications,  CNO,  and 
EW  forces.  Although  these  forces  are  categorized  as  cyberspace  forces  because  they  operate 
inside  cyberspace,  they  are  routinely  located  in  and  perform  missions  in  support  of  the  other 
physical  domains.  The  division  into  this  construct  is  based  on  the  mission  and  function  that 
each  performs.  Communications  forces  consist  of  two  groups:  Information  Management 
(IM)  and  Information  Assurance  (IA)  forces.  IM  forces  “enable  the  provision  of  relevant 
information  to  the  right  person  at  the  right  time  in  a  useable  format  for  situation  awareness 
and  decision  making.”41  IA  forces  “ensure  the  security  of  information  and  the 
communications  system  through  information  protection,  intrusion/attack  detection  and  effect 
isolation,  and  incident  response  to  restore  information  and  system  security.”42 

CNO  forces  consist  of  Computer  Network  Defense  (CND),  Exploitation  (CNE),  and 
Attack  (CNA)  forces.  CND  forces  take  actions  through  the  use  of  computer  networks  “to 
protect,  monitor,  analyze,  detect,  and  respond  to  unauthorized  activity  within  DOD 
information  systems  and  computer  networks  [the  GIG].”4'  CNE  forces  conduct  “enabling 
operations  and  intelligence  collection  . . .  through  the  use  of  computer  networks  [the  GIG]  to 
gather  data  from  target  or  adversary  information  systems  of  networks  [adversary’s  GIG- 
equivalent  system].”44  CNA  forces  take  actions  “through  the  use  of  computer  networks  [the 
GIG  and  cyberspace]  to  disrupt,  deny,  degrade,  or  destroy  information  resident  in  [adversary] 
computers  and  computer  networks,  or  the  computers  and  networks  themselves.”45 

EW  forces  consist  of  Electronic  Support  (ES),  Protect  (EP),  and  Attack  (EA)  forces. 
EA  forces  take  actions  through  the  use  of  “EM  energy,  directed  energy,  or  anti-radiation 
weapons  to  attack  personnel,  facilities,  or  equipment  with  the  intent  of  degrading, 
neutralizing,  or  destroying  adversary  combat  capability.”46  EP  forces  conduct  actions  to 
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“ensure  the  friendly  use  of  the  EM  spectrum.”47  ES  forces  take  actions  “to  search  for, 
intercept,  identify,  and  locate  or  localize  sources  of  intentional  and  unintentional  radiated  EM 
energy  for  the  purpose  of  immediate  threat  recognition,  targeting,  planning,  and  conduct  of 
future  operations.”48 

WHERE  ARE  CYBERSPACE  FORCES  LOCATED  IN  A  JTF? 

We  have  established  what  cyberspace  forces  are,  but  where  are  they  located  in  a  JTF, 
and  to  whom  do  they  belong?  In  order  to  answer  these  questions  we  will  look  at  a  typical 
JTF  organization.  A  JTF  normally  consists  of  several  subordinate  service  or  joint 
components  that  the  CJTF  designates  “to  integrate  planning;  reduce  [his]  span  of  control; 
and/or  significantly  improve  combat  efficiency,  information  flow,  UoE,  weapon  systems 
management,  component  interaction,  or  control  over  the  scheme  of  maneuver.”49  These 
components  are  traditionally  designated  along  the  physical  domains,  through  the 
establishment  of  Joint  FCCs  for  the  Land,  Air,  and  Maritime  components  (JFLCC,  JFACC, 
and  JFMCC)  and  the  Space  Control  Authority  (SCA).50  JTFs  establish  other  subordinate 
components  to  plan,  coordinate,  and  synchronize  operations  that  are  non-physical  domain 
specific,  such  as  psychological,  special,  and  civil-military  operations.51 

However,  JTFs  do  not  normally  designate  a  specific  service  or  joint  FCC  to  plan, 
coordinate,  and  monitor  operations  in  the  cyberspace  domain,  as  evidenced  by  the  fact  that 
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Joint  Doctrine  does  not  provide  provisions  for  such.  Rather,  these  responsibilities  are 
dispersed  throughout  both  the  JTF  headquarters  staff  and  the  subordinate  FCCs  and/or  Task 
Forces  (TFs).  In  a  JTF  headquarters,  two  staff  elements,  the  Directorate  for  Communications 
(J6)  and  the  Directorate  for  10  (J39),  together  maintain  collective  responsibility  for  planning, 
coordinating,  and  monitoring  overall  JTF  cyberspace  operations. 


19 


Principally,  the  J6  “ensures  that  an  adequate  and  effective  communications  system  is 
available  to  support  the  joint  force  C2  system,”53  and  mostly  employs  assigned  and  attached 
IM  and  IA  forces  to  perform  this  mission.  Besides  other  responsibilities,  the  J39 
“coordinates  [the]  integration  and  synchronization  of  CNO  [and  EW]  with  other  10 
capabilities  and  deconflicts  CNO  [and  EW]  with  other  staff  directorates,”54  to  include  the  J6, 
in  order  to  defend  the  JTF’s  “portion”  of  the  GIG  while  exploiting  and  attacking  adversary 
information  and  information  systems,  through  the  employment  of  assigned  and  attached 
CNO  and  EW  forces.  In  addition  to  this  division  of  labor  arrangement  at  the  JTF 
headquarters,  these  arrangements  similarly  exist  at  the  each  subordinate  FCC  and/or  TF, 
especially  in  the  case  of  EW  where  each  FCC  often  has  its  own  EW  forces. 

The  significant  issue  that  occurs  as  a  result  of  this  cyberspace  force  task-organization 
arrangement  is  suboptimal  UoE.  UoE  is  the  “coordination  and  cooperation  toward  common 
objectives”55  which  “can  be  achieved  either  through  Unity  of  Command  (UoC)  or  through 
cooperation.”56  According  to  Dr.  Vego,  “the  highest  degree  of  effectiveness  is  ensured  by 
having  UoE  though  UoC”  and  “failure  to  establish  UoC  results  in  a  state  of  divided 
command,”  which  “has  probably  been  the  cause  of  more  defeats,  and  disasters  than  any  other 
factor”  in  the  history  of  war.57  As  previously  discussed,  cyberspace  provides  a  mechanism  in 
which  to  attack  one  or  more  of  an  adversary’s  Operational  Functions,  and  possibly  directly  or 
indirectly  attack  the  adversary’s  CoG;  and  offers  an  adversary  the  ability  to  do  the  same  to 
friendly  forces.  According  to  Dr.  Vego,  “without  [UoC]  the  [JTF]  cannot  bring  all  available 
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forces  to  bear  against  the  enemy  at  the  decisive  place  and  time”  either  to  defend  or  attack. 
Current  cyberspace  task-organization  in  a  JTF  requires  that  UoE  for  cyberspace  operations  be 
conducted  in  a  cooperative,  rather  than  a  UoC  manner. 
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POSSIBLE  CYBERSPACE  C2  MODELS 


Now  that  we  understand  what  cyberspace  is,  what  it  does  for  the  JTF,  what 
cyberspace  forces  are,  and  the  significant  problem  with  the  current  cyberspace  force  task- 
organization,  we  can  begin  to  develop  a  recommendation  for  how  a  JTF  should  operationally 
command  and  control  cyberspace  operations.  We  will  do  this  by  examining  three  possible 
types  of  cyberspace  C2  models  -  STRATCOM,  JTF,  and  FCC,  and  analyze  these  constructs 
against  Dr.  Vego’s  tenets  of  Operational  C2. 

The  first  is  the  STRATCOM  construct,  where  STRATCOM  is  responsible  for  the  C2 
of  cyberspace  operations  and  retains  Operational  Control  (OPCON)  of  cyberspace  forces.59 
The  second  is  the  JTF  construct,  where  the  JTF  is  responsible  for  the  C2  of  cyberspace 
operations  and  is  delegated  OPCON  of  cyberspace  forces.  The  last  is  the  FCC  construct, 
where  a  FCC,  nominally,  the  Joint  Force  Cyberspace  Component  Commander  (JFCCC)  is 
responsible  for  the  C2  of  cyberspace  operations  and  is  delegated  OPCON  of  cyberspace 
forces.  These  constructs  have  not  been  arbitrarily  chosen;  they  have  actually  been  discussed 
and  postulated  in  real-world  JTFs  and  among  the  Regional  Combatant  Commanders.60  Due 
to  length  limitations,  this  paper  analyzes  these  C2  models  against  only  three  of  Dr.  Vego’s 
Operational  C2  tenets  -  simplicity,  UoE,  and  homogeneity.61  In  the  below  analysis,  a  grade 
of  HIGH,  MEDIUM,  or  LOW  is  assigned  to  each  of  these  tenets  for  the  three  C2  constructs 
based  on  how  well,  or  poorly  that  particular  tenet  is  satisfied. 

Simplicity:  The  JFCCC  model  earns  a  HIGH  grade  in  simplicity  because  it  has  the 
most  clear  and  straightforward  CoC.  The  operational  level  cyberspace  forces  report  to  the 
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JFCCC,  who  reports  directly  to  the  JTF.  Although  not  as  clear  and  straightforward  as  the 
JFCCC  model,  the  JTF  model  earns  a  MEDIUM  grade.  In  this  model,  the  operational  forces 
report  directly  to  the  JTF,  without  an  intermediary  operational  commander,  which  is 
cumbersome  because  in  addition  to  performing  his  primary  function  of  sequencing  and 
synchronizing  the  actions  and  activities  of  all  the  FCCs,  the  CJTF  must  himself  perform  the 
duties  of  a  FCC.  The  least  simplistic  of  the  three  is  the  STRATCOM  model,  because  its  CoC 
is  extremely  awkward  and  cumbersome.  In  this  model,  STRATCOM  is  a  supporting 
commander  to  the  JTF,  which  although  awkward,  is  not  wholly  unrealistic.  The  issue  which 
arises  goes  back  to  the  discussion  on  the  “Theater  Structure  and  Levels  of  War.”  The  CJTF 
is  concerned  with  the  smaller  Theater  of  Operations  and  achieving  his  assigned  operational 
objectives,  however,  STRATCOM  is  concerned  with  both  supporting  the  CJTF,  and 
achieving  his  own  national  strategic  objectives;  thus  this  model  earns  a  LOW  grade. 

UoE:  The  JFCCC  model  earns  a  HIGH  grade  in  UoE  because  in  this  model  a  single 
commander  is  controlling  all  the  operational  forces  that  are  assigned  to  the  mission  of 
managing,  maintaining,  operating,  and  defending  the  JTF’s  “portion”  of  the  GIG;  in  addition 
to  exploiting  and  attacking  targets  in  cyberspace  and  adversary  GIG-equivalent  systems. 
Additionally,  the  JTF  model  earns  a  HIGH  grade  in  UoE  for  these  very  same  reasons, 
although  the  problems  discussed  in  the  simplicity  tenet  still  exist.  In  both  of  these  models, 
not  only  is  UoE  maximized  for  cyberspace  operations,  but  UoE  is  maximized  for  all  of  the 
JTF  operations  because  a  single  commander  is  controlling  all  of  the  operational  forces  -  land, 
air,  maritime,  space,  and  cyberspace,  whose  actions  are  coordinated  and  synchronized  by  the 
CJTF  to  achieve  the  operational  objective(s).  However,  in  the  STRATCOM  model,  UoE  is 
not  preserved  for  all  JTF  operations,  thus  this  model  receives  a  MEDIUM  grade.  This  model 
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does  satisfy  UoE  for  cyberspace  operations  because  STRATCOM  would  retain  OPCON  of 
cyberspace  forces,  but,  overall  UoE  would  not  exist  since  the  other  operational  forces  -  land, 
air,  maritime,  and  space  would  be  controlled  by  the  JTF. 

Homogeneity:  The  JFCCC  model  earns  a  MEDIUM-HIGH  grade  in  homogeneity 
because  in  this  model  all  the  functions  required  to  accomplish  the  mission  of  managing, 
maintaining,  operating,  and  defending  the  JTF’s  “portion”  of  the  GIG;  in  addition  to 
exploiting  and  attacking  targets  in  cyberspace  and  adversary  GIG-equivalent  systems  are 
grouped  into  one  command.  However,  not  all  the  cyberspace  forces  in  the  JTF  would 
necessarily  be  assigned  or  attached  to  the  JFCCC.  As  previously  discussed,  cyberspace 
enables  the  JTF  to  perfonn  each  of  his  six  Operational  Functions.  This  also  holds  true  for 
each  FCC;  therefore,  each  FCC  would  require  its  own  attached  or  assigned  cyberspace  forces, 
principally  IM,  IA,  CND,  and  EW  forces.  The  JFCCC  would  consist  of  all  CNA  and  CNE 
forces,  and  the  remainder  of  those  IM,  IA,  CND  and  EW  forces  not  attached  or  assigned  to 
the  other  FCCs  and  the  JTF.  In  the  JTF  model,  all  the  functions  required  to  accomplish  the 
mission  of  maintaining,  operating,  and  defending  the  JTF’s  “portion”  of  the  GIG;  in  addition 
to  exploiting  and  attacking  targets  in  cyberspace  and  adversary  GIG-equivalent  systems  are 
grouped  into  one  command.  Similar  to  the  JFCCC  model,  not  all  the  cyberspace  forces 
would  be  attached  or  assigned  to  the  JTF  because  some  IM,  IA,  CND,  and  EW  forces  would 
need  to  reside  at  each  FCC  to  enable  performance  of  their  mission  specific  Operational 
Functions.  However,  the  JTF  model  earns  a  slightly  lower  grade  of  MEDIUM  because  of  the 
same  issues  discussed  in  simplicity,  the  JTF  must  function  as  both  the  overall  operational 
commander  and  a  FCC.  Although  the  STRATCOM  model  would  have  all  functions  - 
maintain,  defend,  exploit,  and  attack,  at  the  same  command,  each  FCC  and  the  JTF  would 
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need  its  own  assigned  or  attached  IM,  IA,  CND,  and  EW  forces  to  enable  their  Operational 
Functions.  This  model  earns  a  MEDIUM-LOW  grade  because  all  CNA/CNE  forces  would 
reside  at  a  command  responsible  for  both  its  own  national  and  theater-strategic  objectives, 
while  also  tasking  these  forces  to  support  the  JTF’s  operational  objectives. 

The  analysis  of  these  three  possible  cyberspace  C2  models  -  STRATCOM,  JTF,  and 
JFCCC,  through  the  lens  of  Dr.  Vego’s  Operational  C2  tents  clearly  shows  that  the  JFCCC 
model  is  the  most  effective  and  efficient  method  of  commanding  and  controlling  cyberspace 
forces  at  the  operational  level  of  war.  The  results  of  this  analysis  are  presented  in  Table  (1). 


C2  Model 

Simplicity 

Unity  of  Effort 

Homogeneity 

STRATCOM 

LOW 

MEDIUM 

MEDIUM-LOW 

JTF 

MEDIUM 

HIGH 

MEDIUM 

JFCCC 

HIGH 

HIGH 

MEDIUM-HIGH 

Table  1:  Operational  C2  tenet  analysis 


CONCLUSION 

The  development,  proliferation,  and  integration  of  networked-based  computer  and 
information  systems  into  today’s  military  force  structure  and  operating  concepts  has  arguably 
made  the  U.S.  military  the  most  potent  and  capable  combat  force  in  the  history  of  the  world. 
However,  one  of  our  greatest  strengths  has  perhaps  become  our  single  greatest  vulnerability. 
As  presented  in  this  paper,  five  of  the  Operational  Functions  -  C2,  Intel,  Fires,  Protect,  and 
Fogistics  directly  rely  on  the  availability,  reliability,  and  security  of  the  GIG.  Since  the  GIG 
is  connected  to  cyberspace,  actions  that  occur  in  cyberspace  can  adversely  impact  the  ability 
of  the  JTF  to  perfonn  each  or  all  of  its  Operational  Functions,  which  may  in  turn  prohibit  the 
CJTF  from  achieving  his  operational  objective(s).  Additionally,  since  cyberspace  enables  the 
Operational  Functions  of  some,  if  not  all,  of  our  adversaries,  it  provides  a  mechanism  to 
attack  an  adversary’s  Operational  Functions,  and  possibly  directly  or  indirectly,  their  CoG(s). 
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Therefore,  if  JTFs  want  to  achieve  their  assigned  operational  objectives,  they  must 
place  an  emphasis  on  maintaining,  operating,  and  defending  their  “portion”  of  the  GIG,  while 
understanding  the  adversary’s  GIG-equivalent  system  and  cyberspace.  Today’s  JTFs  are 
equipped  with  cyberspace  forces  that  are  capable  of  performing  these  functions,  and 
tomorrow’s  JTFs  will  be  provided  more  capable  cyberspace  forces,  especially  in  regard  to 
exploit  and  attack  capabilities.  The  question  that  confronts  us  today  is  do  we  perform  these 
critical  functions  in  a  disjointed  and  sometimes  duplicative  manner,  indicative  of  today’s  JTF 
cyberspace  force  task-organization,  or  do  we  optimize  these  efforts  to  ensure  mission 
success? 

Optimization  is  best  achieved  by  grouping  the  majority,  but  not  all,  of  these  forces 
together,  and  assigning  a  single  commander  to  plan,  coordinate,  monitor  and  redirect  their 
actions  to  support  the  JTF’s  Concept  of  Operations  (CONOPs).  As  evidenced  by  Dr.  Vego’s 
Operational  C2  tenets  of  simplicity,  UoE,  and  homogeneity,  the  best  method  of  achieving 
optimization  of  JTF  cyberspace  operations  would  be  through  the  establishment  of  a  JFCCC, 
who  would  be  directly  responsible  to  the  CJTF  for  all  operational-level  cyberspace 
operations. 
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groupings  in  accordance  with  their  abilities.” 
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